CVE-2025-22058

udp: Fix memory accounting leak.

5.5 MediumFix available

CVE-2025-22058 is a medium vulnerability (CVSS 5.5) in Linux, published April 16, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.23%, the 13th percentile. Fixed in kernel 5.14.0-570.37.1.el9_6.

In the Linux kernel, the following vulnerability has been resolved:

udp: Fix memory accounting leak.

Matt Dowling reported a weird UDP memory usage issue.

Under normal operation, the UDP memory usage reported in /proc/net/sockstat remains close to zero. However, it occasionally spiked to 524,288 pages and never dropped. Moreover, the value doubled when the application was terminated. Finally, it caused intermittent packet drops.

We can reproduce the issue with the script below [0]:

/proc/net/sockstat reports 0 pages

# cat /proc/net/sockstat | grep UDP:
UDP: inuse 1 mem 0

Run the script till the report reaches 524,288

# python3 test.py & sleep 5
# cat /proc/net/sockstat | grep UDP:
UDP: inuse 3 mem 524288  <-- (INT_MAX + 1) >> PAGE_SHIFT

Kill the socket and confirm the number never drops

# pkill python3 && sleep 5
# cat /proc/net/sockstat | grep UDP:
UDP: inuse 1 mem 524288

(necessary since v6.0) Trigger proto_memory_pcpu_drain()

# python3 test.py & sleep 1 && pkill python3

The number doubles

# cat /proc/net/sockstat | grep UDP:
UDP: inuse 1 mem 1048577

The application set INT_MAX to SO_RCVBUF, which triggered an integer overflow in udp_rmem_release().

When a socket is close()d, udp_destruct_common() purges its receive queue and sums up skb->truesize in the queue. This total is calculated and stored in a local unsigned integer variable.

The total size is then passed to udp_rmem_release() to adjust memory accounting. However, because the function takes a signed integer argument, the total size can wrap around, causing an overflow.

Then, the released amount is calculated as follows:

Add size to sk->sk_forward_alloc.
Round down sk->sk_forward_alloc to the nearest lower multiple of PAGE_SIZE and assign it to amount.
Subtract amount from sk->sk_forward_alloc.
Pass amount >> PAGE_SHIFT to __sk_mem_reduce_allocated().

When the issue occurred, the total in udp_destruct_common() was 2147484480 (INT_MAX + 833), which was cast to -2147482816 in udp_rmem_release().

At 1) sk->sk_forward_alloc is changed from 3264 to -2147479552, and 2) sets -2147479552 to amount. 3) reverts the wraparound, so we don't see a warning in inet_sock_destruct(). However, udp_memory_allocated ends up doubling at 4).

Since commit 3cd3399dd7a8 ("net: implement per-cpu reserves for memory_allocated"), memory usage no longer doubles immediately after a socket is close()d because __sk_mem_reduce_allocated() caches the amount in udp_memory_per_cpu_fw_alloc. However, the next time a UDP socket receives a packet, the subtraction takes effect, causing UDP memory usage to double.

This issue makes further memory allocation fail once the socket's sk->sk_rmem_alloc exceeds net.ipv4.udp_rmem_min, resulting in packet drops.

To prevent this issue, let's use unsigned int for the calculation and call sk_forward_alloc_add() only once for the small delta.

Note that first_packet_length() also potentially has the same problem.

[0]: from socket import *

SO_RCVBUFFORCE = 33 INT_MAX = (2 ** 31) - 1

s = socket(AF_INET, SOCK_DGRAM) s.bind(('', 0)) s.setsockopt(SOL_SOCKET, SO_RCVBUFFORCE, INT_MAX)

c = socket(AF_INET, SOCK_DGRAM) c.connect(s.getsockname())

data = b'a' * 100

while True: c.send(data)

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

0.23%Up 0.2 points since Apr 17, 2025

What each source reports

NVD Score used 5.5

In the Linux kernel, the following vulnerability has been resolved:

udp: Fix memory accounting leak.

Matt Dowling reported a weird UDP memory usage issue.

We can reproduce the issue with the script below [0]:

/proc/net/sockstat reports 0 pages

# cat /proc/net/sockstat | grep UDP:
UDP: inuse 1 mem 0

Run the script till the report reaches 524,288

# python3 test.py & sleep 5
# cat /proc/net/sockstat | grep UDP:
UDP: inuse 3 mem 524288  <-- (INT_MAX + 1) >> PAGE_SHIFT

Kill the socket and confirm the number never drops

# pkill python3 && sleep 5
# cat /proc/net/sockstat | grep UDP:
UDP: inuse 1 mem 524288

(necessary since v6.0) Trigger proto_memory_pcpu_drain()

# python3 test.py & sleep 1 && pkill python3

The number doubles

# cat /proc/net/sockstat | grep UDP:
UDP: inuse 1 mem 1048577

The application set INT_MAX to SO_RCVBUF, which triggered an integer overflow in udp_rmem_release().

When a socket is close()d, udp_destruct_common() purges its receive queue and sums up skb->truesize in the queue. This total is calculated and stored in a local unsigned integer variable.

The total size is then passed to udp_rmem_release() to adjust memory accounting. However, because the function takes a signed integer argument, the total size can wrap around, causing an overflow.

Then, the released amount is calculated as follows:

Add size to sk->sk_forward_alloc.
Round down sk->sk_forward_alloc to the nearest lower multiple of PAGE_SIZE and assign it to amount.
Subtract amount from sk->sk_forward_alloc.
Pass amount >> PAGE_SHIFT to __sk_mem_reduce_allocated().

When the issue occurred, the total in udp_destruct_common() was 2147484480 (INT_MAX + 833), which was cast to -2147482816 in udp_rmem_release().

This issue makes further memory allocation fail once the socket's sk->sk_rmem_alloc exceeds net.ipv4.udp_rmem_min, resulting in packet drops.

To prevent this issue, let's use unsigned int for the calculation and call sk_forward_alloc_add() only once for the small delta.

Note that first_packet_length() also potentially has the same problem.

[0]: from socket import *

SO_RCVBUFFORCE = 33 INT_MAX = (2 ** 31) - 1

s = socket(AF_INET, SOCK_DGRAM) s.bind(('', 0)) s.setsockopt(SOL_SOCKET, SO_RCVBUFFORCE, INT_MAX)

c = socket(AF_INET, SOCK_DGRAM) c.connect(s.getsockname())

data = b'a' * 100

while True: c.send(data)

Record: CVE-2025-22058
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-401
Updated: 2026-11-02

CVE List No score

udp: Fix memory accounting leak.

In the Linux kernel, the following vulnerability has been resolved:

udp: Fix memory accounting leak.

Matt Dowling reported a weird UDP memory usage issue.

We can reproduce the issue with the script below [0]:

/proc/net/sockstat reports 0 pages

# cat /proc/net/sockstat | grep UDP:
UDP: inuse 1 mem 0

Run the script till the report reaches 524,288

# python3 test.py & sleep 5
# cat /proc/net/sockstat | grep UDP:
UDP: inuse 3 mem 524288  <-- (INT_MAX + 1) >> PAGE_SHIFT

Kill the socket and confirm the number never drops

# pkill python3 && sleep 5
# cat /proc/net/sockstat | grep UDP:
UDP: inuse 1 mem 524288

(necessary since v6.0) Trigger proto_memory_pcpu_drain()

# python3 test.py & sleep 1 && pkill python3

The number doubles

# cat /proc/net/sockstat | grep UDP:
UDP: inuse 1 mem 1048577

The application set INT_MAX to SO_RCVBUF, which triggered an integer overflow in udp_rmem_release().

When a socket is close()d, udp_destruct_common() purges its receive queue and sums up skb->truesize in the queue. This total is calculated and stored in a local unsigned integer variable.

The total size is then passed to udp_rmem_release() to adjust memory accounting. However, because the function takes a signed integer argument, the total size can wrap around, causing an overflow.

Then, the released amount is calculated as follows:

Add size to sk->sk_forward_alloc.
Round down sk->sk_forward_alloc to the nearest lower multiple of PAGE_SIZE and assign it to amount.
Subtract amount from sk->sk_forward_alloc.
Pass amount >> PAGE_SHIFT to __sk_mem_reduce_allocated().

When the issue occurred, the total in udp_destruct_common() was 2147484480 (INT_MAX + 833), which was cast to -2147482816 in udp_rmem_release().

This issue makes further memory allocation fail once the socket's sk->sk_rmem_alloc exceeds net.ipv4.udp_rmem_min, resulting in packet drops.

To prevent this issue, let's use unsigned int for the calculation and call sk_forward_alloc_add() only once for the small delta.

Note that first_packet_length() also potentially has the same problem.

[0]: from socket import *

SO_RCVBUFFORCE = 33 INT_MAX = (2 ** 31) - 1

s = socket(AF_INET, SOCK_DGRAM) s.bind(('', 0)) s.setsockopt(SOL_SOCKET, SO_RCVBUFFORCE, INT_MAX)

c = socket(AF_INET, SOCK_DGRAM) c.connect(s.getsockname())

data = b'a' * 100

while True: c.send(data)

Record: CVE-2025-22058
Updated: 2026-11-02

EUVDEUVD-2025-11236 No score

In the Linux kernel, the following vulnerability has been resolved:

udp: Fix memory accounting leak.

Matt Dowling reported a weird UDP memory usage issue.

We can reproduce the issue with the script below [0]:

/proc/net/sockstat reports 0 pages

# cat /proc/net/sockstat | grep UDP:
UDP: inuse 1 mem 0

Run the script till the report reaches 524,288

# python3 test.py & sleep 5
# cat /proc/net/sockstat | grep UDP:
UDP: inuse 3 mem 524288  <-- (INT_MAX + 1) >> PAGE_SHIFT

Kill the socket and confirm the number never drops

# pkill python3 && sleep 5
# cat /proc/net/sockstat | grep UDP:
UDP: inuse 1 mem 524288

(necessary since v6.0) Trigger proto_memory_pcpu_drain()

# python3 test.py & sleep 1 && pkill python3

The number doubles

# cat /proc/net/sockstat | grep UDP:
UDP: inuse 1 mem 1048577

The application set INT_MAX to SO_RCVBUF, which triggered an integer overflow in udp_rmem_release().

When a socket is close()d, udp_destruct_common() purges its receive queue and sums up skb->truesize in the queue. This total is calculated and stored in a local unsigned integer variable.

The total size is then passed to udp_rmem_release() to adjust memory accounting. However, because the function takes a signed integer argument, the total size can wrap around, causing an overflow.

Then, the released amount is calculated as follows:

Add size to sk->sk_forward_alloc.
Round down sk->sk_forward_alloc to the nearest lower multiple of PAGE_SIZE and assign it to amount.
Subtract amount from sk->sk_forward_alloc.
Pass amount >> PAGE_SHIFT to __sk_mem_reduce_allocated().

When the issue occurred, the total in udp_destruct_common() was 2147484480 (INT_MAX + 833), which was cast to -2147482816 in udp_rmem_release().

This issue makes further memory allocation fail once the socket's sk->sk_rmem_alloc exceeds net.ipv4.udp_rmem_min, resulting in packet drops.

To prevent this issue, let's use unsigned int for the calculation and call sk_forward_alloc_add() only once for the small delta.

Note that first_packet_length() also potentially has the same problem.

[0]: from socket import *

SO_RCVBUFFORCE = 33 INT_MAX = (2 ** 31) - 1

s = socket(AF_INET, SOCK_DGRAM) s.bind(('', 0)) s.setsockopt(SOL_SOCKET, SO_RCVBUFFORCE, INT_MAX)

c = socket(AF_INET, SOCK_DGRAM) c.connect(s.getsockname())

data = b'a' * 100

while True: c.send(data)

Record: EUVD-2025-11236
Updated: 2026-11-02

GitHub AdvisoriesGHSA-qh2m-xfgm-crh8 5.5

In the Linux kernel, the following vulnerability has been resolved: udp: Fix memory accounting...

In the Linux kernel, the following vulnerability has been resolved:

udp: Fix memory accounting leak.

Matt Dowling reported a weird UDP memory usage issue.

We can reproduce the issue with the script below [0]:

/proc/net/sockstat reports 0 pages

# cat /proc/net/sockstat | grep UDP:
UDP: inuse 1 mem 0

Run the script till the report reaches 524,288

# python3 test.py & sleep 5
# cat /proc/net/sockstat | grep UDP:
UDP: inuse 3 mem 524288  <-- (INT_MAX + 1) >> PAGE_SHIFT

Kill the socket and confirm the number never drops

# pkill python3 && sleep 5
# cat /proc/net/sockstat | grep UDP:
UDP: inuse 1 mem 524288

(necessary since v6.0) Trigger proto_memory_pcpu_drain()

# python3 test.py & sleep 1 && pkill python3

The number doubles

# cat /proc/net/sockstat | grep UDP:
UDP: inuse 1 mem 1048577

The application set INT_MAX to SO_RCVBUF, which triggered an integer overflow in udp_rmem_release().

When a socket is close()d, udp_destruct_common() purges its receive queue and sums up skb->truesize in the queue. This total is calculated and stored in a local unsigned integer variable.

The total size is then passed to udp_rmem_release() to adjust memory accounting. However, because the function takes a signed integer argument, the total size can wrap around, causing an overflow.

Then, the released amount is calculated as follows:

Add size to sk->sk_forward_alloc.
Round down sk->sk_forward_alloc to the nearest lower multiple of PAGE_SIZE and assign it to amount.
Subtract amount from sk->sk_forward_alloc.
Pass amount >> PAGE_SHIFT to __sk_mem_reduce_allocated().

When the issue occurred, the total in udp_destruct_common() was 2147484480 (INT_MAX + 833), which was cast to -2147482816 in udp_rmem_release().

This issue makes further memory allocation fail once the socket's sk->sk_rmem_alloc exceeds net.ipv4.udp_rmem_min, resulting in packet drops.

To prevent this issue, let's use unsigned int for the calculation and call sk_forward_alloc_add() only once for the small delta.

Note that first_packet_length() also potentially has the same problem.

[0]: from socket import *

SO_RCVBUFFORCE = 33 INT_MAX = (2 ** 31) - 1

s = socket(AF_INET, SOCK_DGRAM) s.bind(('', 0)) s.setsockopt(SOL_SOCKET, SO_RCVBUFFORCE, INT_MAX)

c = socket(AF_INET, SOCK_DGRAM) c.connect(s.getsockname())

data = b'a' * 100

while True: c.send(data)

Record: GHSA-qh2m-xfgm-crh8
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-401
Updated: 2026-11-02

OSVBELL-CVE-2025-22058 5.5

Record: BELL-CVE-2025-22058
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2025-22058 5.5

In the Linux kernel, the following vulnerability has been resolved: udp: Fix memory accounting leak. Matt Dowling reported a weird UDP memory usage issue. Under normal operation, the UDP memory usage reported in /proc/net/sockstat remains close to zero. However, it occasionally spiked to 524,288 pages and never dropped. Moreover, the value doubled when the application was terminated. Finally, it caused intermittent packet drops. We can reproduce the issue with the script below [0]: 1. /proc/net/sockstat reports 0 pages # cat /proc/net/sockstat | grep UDP: UDP: inuse 1 mem 0 2. Run the script till the report reaches 524,288 # python3 test.py & sleep 5 # cat /proc/net/sockstat | grep UDP: UDP: inuse 3 mem 524288 <-- (INT_MAX + 1) >> PAGE_SHIFT 3. Kill the socket and confirm the number never drops # pkill python3 && sleep 5 # cat /proc/net/sockstat | grep UDP: UDP: inuse 1 mem 524288 4. (necessary since v6.0) Trigger proto_memory_pcpu_drain() # python3 test.py & sleep 1 && pkill python3 5. The number doubles # cat /proc/net/sockstat | grep UDP: UDP: inuse 1 mem 1048577 The application set INT_MAX to SO_RCVBUF, which triggered an integer overflow in udp_rmem_release(). When a socket is close()d, udp_destruct_common() purges its receive queue and sums up skb->truesize in the queue. This total is calculated and stored in a local unsigned integer variable. The total size is then passed to udp_rmem_release() to adjust memory accounting. However, because the function takes a signed integer argument, the total size can wrap around, causing an overflow. Then, the released amount is calculated as follows: 1) Add size to sk->sk_forward_alloc. 2) Round down sk->sk_forward_alloc to the nearest lower multiple of PAGE_SIZE and assign it to amount. 3) Subtract amount from sk->sk_forward_alloc. 4) Pass amount >> PAGE_SHIFT to __sk_mem_reduce_allocated(). When the issue occurred, the total in udp_destruct_common() was 2147484480 (INT_MAX + 833), which was cast to -2147482816 in udp_rmem_release(). At 1) sk->sk_forward_alloc is changed from 3264 to -2147479552, and 2) sets -2147479552 to amount. 3) reverts the wraparound, so we don't see a warning in inet_sock_destruct(). However, udp_memory_allocated ends up doubling at 4). Since commit 3cd3399dd7a8 ("net: implement per-cpu reserves for memory_allocated"), memory usage no longer doubles immediately after a socket is close()d because __sk_mem_reduce_allocated() caches the amount in udp_memory_per_cpu_fw_alloc. However, the next time a UDP socket receives a packet, the subtraction takes effect, causing UDP memory usage to double. This issue makes further memory allocation fail once the socket's sk->sk_rmem_alloc exceeds net.ipv4.udp_rmem_min, resulting in packet drops. To prevent this issue, let's use unsigned int for the calculation and call sk_forward_alloc_add() only once for the small delta. Note that first_packet_length() also potentially has the same problem. [0]: from socket import * SO_RCVBUFFORCE = 33 INT_MAX = (2 ** 31) - 1 s = socket(AF_INET, SOCK_DGRAM) s.bind(('', 0)) s.setsockopt(SOL_SOCKET, SO_RCVBUFFORCE, INT_MAX) c = socket(AF_INET, SOCK_DGRAM) c.connect(s.getsockname()) data = b'a' * 100 while True: c.send(data)

Record: DEBIAN-CVE-2025-22058
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 45 moreShow less

OSVOESA-2025-1465 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context

If a driver calls can_get_echo_skb() during a hardware IRQ (which is often, but not always, the case), the 'WARN_ON(in_irq)' in net/core/skbuff.c#skb_release_head_state() might be triggered, under network congestion circumstances, together with the potential risk of a NULL pointer dereference.

The root cause of this issue is the call to kfree_skb() instead of dev_kfree_skb_irq() in net/core/dev.c#enqueue_to_backlog().

This patch prevents the skb to be freed within the call to netif_rx() by incrementing its reference count with skb_get(). The skb is finally freed by one of the in-irq-context safe functions: dev_consume_skb_any() or dev_kfree_skb_any(). The "any" version is used because some drivers might call can_get_echo_skb() in a normal context.

The reason for this issue to occur is that initially, in the core network stack, loopback skb were not supposed to be received in hardware IRQ context. The CAN stack is an exeption.

This bug was previously reported back in 2017 in [1] but the proposed patch never got accepted.

While [1] directly modifies net/core/dev.c, we try to propose here a smoother modification local to CAN network stack (the assumption behind is that only CAN devices are affected by this issue).

[1] http://lore.kernel.org/r/[email protected](CVE-2020-36789)

In the Linux kernel, the following vulnerability has been resolved:

video: fbdev: cirrusfb: check pixclock to avoid divide by zero

Do a sanity check on pixclock value to avoid divide by zero.

If the pixclock value is zero, the cirrusfb driver will round up pixclock to get the derived frequency as close to maxclock as possible.

Syzkaller reported a divide error in cirrusfb_check_pixclock.

divide error: 0000 [#1] SMP KASAN PTI CPU: 0 PID: 14938 Comm: cirrusfb_test Not tainted 5.15.0-rc6 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.11.0-2 RIP: 0010:cirrusfb_check_var+0x6f1/0x1260

Call Trace: fb_set_var+0x398/0xf90 do_fb_ioctl+0x4b8/0x6f0 fb_ioctl+0xeb/0x130 __x64_sys_ioctl+0x19d/0x220 do_syscall_64+0x3a/0x80 entry_SYSCALL_64_after_hwframe+0x44/0xae(CVE-2021-47641)

In the Linux kernel, the following vulnerability has been resolved:

can: dev: can_restart: fix use after free bug

After calling netif_rx_ni(skb), dereferencing skb is unsafe. Especially, the can_frame cf which aliases skb memory is accessed after the netif_rx_ni() in: stats->rx_bytes += cf->len;

Reordering the lines solves the issue.(CVE-2021-47668)

In the Linux kernel, the following vulnerability has been resolved:

can: peak_usb: fix use after free bugs

After calling peak_usb_netif_rx_ni(skb), dereferencing skb is unsafe. Especially, the can_frame cf which aliases skb memory is accessed after the peak_usb_netif_rx_ni().

Reordering the lines solves the issue.(CVE-2021-47670)

In the Linux kernel, the following vulnerability has been resolved:

qede: confirm skb is allocated before using

qede_build_skb() assumes build_skb() always works and goes straight to skb_reserve(). However, build_skb() can fail under memory pressure. This results in a kernel panic because the skb to reserve is NULL.

Add a check in case build_skb() failed to allocate and return NULL.

The NULL return is handled correctly in callers to qede_build_skb().(CVE-2022-49084)

In the Linux kernel, the following vulnerability has been resolved:

net: openvswitch: fix leak of nested actions

While parsing user-provided actions, openvswitch module may dynamically allocate memory and store pointers in the internal copy of the actions. So this memory has to be freed while destroying the actions.

Currently there are only two such actions: ct() and set(). However, there are many actions that can hold nested lists…

Record: OESA-2025-1465
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-1878 8.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

bpf: consider that tail calls invalidate packet pointers

Tail-called programs could execute any of the helpers that invalidate packet pointers. Hence, conservatively assume that each tail call invalidates packet pointers.

Making the change in bpf_helper_changes_pkt_data() automatically makes use of check_cfg() logic that computes 'changes_pkt_data' effect for global sub-programs, such that the following program could be rejected:

int tail_call(struct __sk_buff *sk)
{
	bpf_tail_call_static(sk, &amp;jmp_table, 0);
	return 0;
}

SEC(&quot;tc&quot;)
int not_safe(struct __sk_buff *sk)
{
	int *p = (void *)(long)sk-&gt;data;
	... make p valid ...
	tail_call(sk);
	*p = 42; /* this is unsafe */
	...
}

The tc_bpf2bpf.c:subprog_tc() needs change: mark it as a function that can invalidate packet pointers. Otherwise, it can't be freplaced with tailcall_freplace.c:entry_freplace() that does a tail call.(CVE-2024-58237)

In the Linux kernel, the following vulnerability has been resolved:

RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]"

The Call Trace is as below: " <TASK> ? show_regs.cold+0x1a/0x1f ? __rxe_cleanup+0x12c/0x170 [rdma_rxe] ? __warn+0x84/0xd0 ? __rxe_cleanup+0x12c/0x170 [rdma_rxe] ? report_bug+0x105/0x180 ? handle_bug+0x46/0x80 ? exc_invalid_op+0x19/0x70 ? asm_exc_invalid_op+0x1b/0x20 ? __rxe_cleanup+0x12c/0x170 [rdma_rxe] ? __rxe_cleanup+0x124/0x170 [rdma_rxe] rxe_destroy_qp.cold+0x24/0x29 [rdma_rxe] ib_destroy_qp_user+0x118/0x190 [ib_core] rdma_destroy_qp.cold+0x43/0x5e [rdma_cm] rtrs_cq_qp_destroy.cold+0x1d/0x2b [rtrs_core] rtrs_srv_close_work.cold+0x1b/0x31 [rtrs_server] process_one_work+0x21d/0x3f0 worker_thread+0x4a/0x3c0 ? process_one_work+0x3f0/0x3f0 kthread+0xf0/0x120 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork+0x22/0x30 </TASK> " When too many rdma resources are allocated, rxe needs more time to handle these rdma resources. Sometimes with the current timeout, rxe can not release the rdma resources correctly.

Compared with other rdma drivers, a bigger timeout is used.(CVE-2025-21829)

In the Linux kernel, the following vulnerability has been resolved:

net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC

Actually ENETC VFs do not support HWTSTAMP_TX_ONESTEP_SYNC because only ENETC PF can access PMa_SINGLE_STEP registers. And there will be a crash if VFs are used to test one-step timestamp, the crash log as follows.

[ 129.110909] Unable to handle kernel paging request at virtual address 00000000000080c0 [ 129.287769] Call trace: [ 129.290219] enetc_port_mac_wr+0x30/0xec (P) [ 129.294504] enetc_start_xmit+0xda4/0xe74 [ 129.298525] enetc_xmit+0x70/0xec [ 129.301848] dev_hard_start_xmit+0x98/0x118(CVE-2025-21894)

In the Linux kernel, the following vulnerability has been resolved:

caif_virtio: fix wrong pointer check in cfv_probe()

del_vqs() frees virtqueues, therefore cfv->vq_tx pointer should be checked for NULL before calling it, not cfv->vdev. Also the current implementation is redundant because the pointer cfv->vdev is dereferenced before it is checked for NULL.

Fix this by checking cfv->vq_tx for NULL instead of cfv->vdev before calling del_vqs().(CVE-2025-21904)

In the Linux kernel, the following vulnerability has been resolved:

eth: bnxt: do not update checksum in bnxt_xdp_build_skb()

The bnxt_rx_pkt() updates ip_summed value at the end if checksum offload is enabled. When the XDP-MB program is attached and it returns XDP_PASS, the bnxt_xdp_build_skb() is called to update skb_shared_info. The main purpose of bnxt_xdp_build_skb() is to update skb_shared_info, but it updates ip_summed value too if checksum offload is enabled. This is actually duplicate work.

When…

Record: OESA-2025-1878
CVSS 3.1: 8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-1879 8.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

bpf: consider that tail calls invalidate packet pointers

Tail-called programs could execute any of the helpers that invalidate packet pointers. Hence, conservatively assume that each tail call invalidates packet pointers.

int tail_call(struct __sk_buff *sk)
{
	bpf_tail_call_static(sk, &amp;jmp_table, 0);
	return 0;
}

SEC(&quot;tc&quot;)
int not_safe(struct __sk_buff *sk)
{
	int *p = (void *)(long)sk-&gt;data;
	... make p valid ...
	tail_call(sk);
	*p = 42; /* this is unsafe */
	...
}

In the Linux kernel, the following vulnerability has been resolved:

netem: Update sch->q.qlen before qdisc_tree_reduce_backlog()

qdisc_tree_reduce_backlog() notifies parent qdisc only if child qdisc becomes empty, therefore we need to reduce the backlog of the child qdisc before calling it. Otherwise it would miss the opportunity to call cops->qlen_notify(), in the case of DRR, it resulted in UAF since DRR uses ->qlen_notify() to maintain its active list.(CVE-2025-21703)

In the Linux kernel, the following vulnerability has been resolved:

RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]"

Compared with other rdma drivers, a bigger timeout is used.(CVE-2025-21829)

In the Linux kernel, the following vulnerability has been resolved:

net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC

In the Linux kernel, the following vulnerability has been resolved:

caif_virtio: fix wrong pointer check in cfv_probe()

Fix this by checking cfv->vq_tx for NULL instead of cfv->vdev before calling del_vqs().(CVE-2025-21904)

In the Linux kernel, the…

Record: OESA-2025-1879
CVSS 3.1: 8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-1880 8.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

bpf: consider that tail calls invalidate packet pointers

Tail-called programs could execute any of the helpers that invalidate packet pointers. Hence, conservatively assume that each tail call invalidates packet pointers.

int tail_call(struct __sk_buff *sk)
{
	bpf_tail_call_static(sk, &amp;jmp_table, 0);
	return 0;
}

SEC(&quot;tc&quot;)
int not_safe(struct __sk_buff *sk)
{
	int *p = (void *)(long)sk-&gt;data;
	... make p valid ...
	tail_call(sk);
	*p = 42; /* this is unsafe */
	...
}

In the Linux kernel, the following vulnerability has been resolved:

eth: bnxt: do not update checksum in bnxt_xdp_build_skb()

When the bnxt_rx_pkt() updates ip_summed value, it checks if ip_summed is CHECKSUM_NONE or not. It means that ip_summed should be CHECKSUM_NONE at this moment. But ip_summed may already be updated to CHECKSUM_UNNECESSARY in the XDP-MB-PASS path. So the by skb_checksum_none_assert() WARNS about it.

This is duplicate work and updating ip_summed in the bnxt_xdp_build_skb() is not needed.

Splat looks like: WARNING: CPU: 3 PID: 5782 at ./include/linux/skbuff.h:5155 bnxt_rx_pkt+0x479b/0x7610 [bnxt_en] Modules linked in: bnxt_re bnxt_en rdma_ucm rdma_cm iw_cm ib_cm ib_uverbs veth xt_nat xt_tcpudp xt_conntrack nft_chain_nat xt_MASQUERADE nf_] CPU: 3 UID: 0 PID: 5782 Comm: socat Tainted: G W 6.14.0-rc4+ #27 Tainted: [W]=WARN Hardware name: ASUS System Product Name/PRIME Z690-P D4, BIOS 0603 11/01/2021 RIP: 0010:bnxt_rx_pkt+0x479b/0x7610 [bnxt_en] Code: 54 24 0c 4c 89 f1 4c 89 ff c1 ea 1f ff d3 0f 1f 00 49 89 c6 48 85 c0 0f 84 4c e5 ff ff 48 89 c7 e8 ca 3d a0 c8 e9 8f f4 ff ff <0f> 0b f RSP: 0018:ffff88881ba09928 EFLAGS: 00010202 RAX: 0000000000000000 RBX: 00000000c7590303 RCX: 0000000000000000 RDX: 1ffff1104e7d1610 RSI: 0000000000000001 RDI: ffff8881c91300b8 RBP: ffff88881ba09b28 R08: ffff888273e8b0d0 R09: ffff888273e8b070 R10: ffff888273e8b010 R11: ffff888278b0f000 R12: ffff888273e8b080 R13: ffff8881c9130e00 R14: ffff8881505d3800 R15: ffff888273e8b000 FS: 00007f5a2e7be080(0000) GS:ffff88881ba00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fff2e708ff8 CR3: 000000013e3b0000 CR4: 00000000007506f0 PKRU: 55555554 Call Trace: <IRQ> ? __warn+0xcd/0x2f0 ? bnxt_rx_pkt+0x479b/0x7610 ? report_bug+0x326/0x3c0 ? handle_bug+0x53/0xa0 ? exc_invalid_op+0x14/0x50 ? asm_exc_invalid_op+0x16/0x20 ? bnxt_rx_pkt+0x479b/0x7610 ? bnxt_rx_pkt+0x3e41/0x7610 ? __pfx_bnxt_rx_pkt+0x10/0x10 ? napi_complete_done+0x2cf/0x7d0 __bnxt_poll_work+0x4e8/0x1220 ? __pfx___bnxt_poll_work+0x10/0x10 ? __pfx_mark_lock.part.0+0x10/0x10 bnxt_poll_p5+0x36a/0xfa0 ? __pfx_bnxt_poll_p5+0x10/0x10 __napi_poll.constprop.0+0xa0/0x440 net_rx_action+0x899/0xd00 ...

Following ping.py patch adds xdp-mb-pass case. so ping.py is going to be able to reproduce this issue.(CVE-2025-21960)

In the Linux kernel, the following vulnerability has been resolved:

eth: bnxt: fix truesize for…

Record: OESA-2025-1880
CVSS 3.1: 8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-2081 8.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

blk-mq: don't touch ->tagset in blk_mq_get_sq_hctx

blk_mq_run_hw_queues() could be run when there isn't queued request and after queue is cleaned up, at that time tagset is freed, because tagset lifetime is covered by driver, and often freed after blk_cleanup_queue() returns.

So don't touch ->tagset for figuring out current default hctx by the mapping built in request queue, so use-after-free on tagset can be avoided. Meantime this way should be fast than retrieving mapping from tagset.(CVE-2022-49377)

In the Linux kernel, the following vulnerability has been resolved:

macsec: fix UAF bug for real_dev

Create a new macsec device but not get reference to real_dev. That can not ensure that real_dev is freed after macsec. That will trigger the UAF bug for real_dev as following:

================================================================== BUG: KASAN: use-after-free in macsec_get_iflink+0x5f/0x70 drivers/net/macsec.c:3662 Call Trace: ... macsec_get_iflink+0x5f/0x70 drivers/net/macsec.c:3662 dev_get_iflink+0x73/0xe0 net/core/dev.c:637 default_operstate net/core/link_watch.c:42 [inline] rfc2863_policy+0x233/0x2d0 net/core/link_watch.c:54 linkwatch_do_dev+0x2a/0x150 net/core/link_watch.c:161

Allocated by task 22209: ... alloc_netdev_mqs+0x98/0x1100 net/core/dev.c:10549 rtnl_create_link+0x9d7/0xc00 net/core/rtnetlink.c:3235 veth_newlink+0x20e/0xa90 drivers/net/veth.c:1748

Freed by task 8: ... kfree+0xd6/0x4d0 mm/slub.c:4552 kvfree+0x42/0x50 mm/util.c:615 device_release+0x9f/0x240 drivers/base/core.c:2229 kobject_cleanup lib/kobject.c:673 [inline] kobject_release lib/kobject.c:704 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x1c8/0x540 lib/kobject.c:721 netdev_run_todo+0x72e/0x10b0 net/core/dev.c:10327

After commit faab39f63c1f ("net: allow out-of-order netdev unregistration") and commit e5f80fcf869a ("ipv6: give an IPv6 dev to blackhole_netdev"), we can add dev_hold_track() in macsec_dev_init() and dev_put_track() in macsec_free_netdev() to fix the problem.(CVE-2022-49390)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: don't skip expired elements during walk

There is an asymmetry between commit/abort and preparation phase if the following conditions are met:

set is a verdict map ("1.2.3.4 : jump foo")
timeouts are enabled

In this case, following sequence is problematic:

element E in set S refers to chain C
userspace requests removal of set S
kernel does a set walk to decrement chain->use count for all elements from preparation phase
kernel does another set walk to remove elements from the commit phase (or another walk to do a chain->use increment for all elements from abort phase)

If E has already expired in 1), it will be ignored during list walk, so its use count won't have been changed.

Then, when set is culled, ->destroy callback will zap the element via nf_tables_set_elem_destroy(), but this function is only safe for elements that have been deactivated earlier from the preparation phase: lack of earlier deactivate removes the element but leaks the chain use count, which results in a WARN splat when the chain gets removed later, plus a leak of the nft_chain structure.

Update pipapo_get() not to skip expired elements, otherwise flush command reports bogus ENOENT errors.(CVE-2023-52924)

In the Linux kernel, the following vulnerability has been resolved:

powerpc/mm/fault: Fix kfence page fault reporting

copy_from_kernel_nofault() can be called when doing read of /proc/kcore. /proc/kcore can have some unmapped kfence objects which when read via copy_from_kernel_nofault() can cause page faults. Since *_nofault() functions define their own fixup table for handling fault, use that instead of…

Record: OESA-2025-2081
CVSS 3.1: 8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-2082 8.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

blk-mq: don't touch ->tagset in blk_mq_get_sq_hctx

In the Linux kernel, the following vulnerability has been resolved:

macsec: fix UAF bug for real_dev

Create a new macsec device but not get reference to real_dev. That can not ensure that real_dev is freed after macsec. That will trigger the UAF bug for real_dev as following:

Allocated by task 22209: ... alloc_netdev_mqs+0x98/0x1100 net/core/dev.c:10549 rtnl_create_link+0x9d7/0xc00 net/core/rtnetlink.c:3235 veth_newlink+0x20e/0xa90 drivers/net/veth.c:1748

In the Linux kernel, the following vulnerability has been resolved:

powerpc/mm/fault: Fix kfence page fault reporting

Hence we search the exception tables for the nip which generated the fault. If there is an entry then we let the fixup table handler handle the page fault by returning an error from within ___do_page_fault().

This can be easily triggered if someone tries to do dd from /proc/kcore. eg. dd if=/proc/kcore of=/dev/null bs=1M

Some example false negatives:

=============================== BUG: KFENCE: invalid read in copy_from_kernel_nofault+0x9c/0x1a0 Invalid read at 0xc0000000fdff0000: copy_from_kernel_nofault+0x9c/0x1a0 0xc00000000665f950 read_kcore_iter+0x57c/0xa04 proc_reg_read_iter+0xe4/0x16c vfs_read+0x320/0x3ec ksys_read+0x90/0x154 system_call_exception+0x120/0x310 system_call_vectored_common+0x15c/0x2ec

BUG: KFENCE: use-after-free read in copy_from_kernel_nofault+0x9c/0x1a0 Use-after-free read at 0xc0000000fe050000 (in kfence-#2): copy_from_kernel_nofault+0x9c/0x1a0 0xc00000000665f950 read_kcore_iter+0x57c/0xa04 proc_reg_read_iter+0xe4/0x16c vfs_read+0x320/0x3ec ksys_read+0x90/0x154 system_call_exception+0x120/0x310 system_call_vectored_common+0x15c/0x2ec(CVE-2024-56678)

In the Linux kernel, the following vulnerability has been resolved:

nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur

The action force…

Record: OESA-2025-2082
CVSS 3.1: 8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2025:14420 7.1

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:14420
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2025:14438 7.1

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:14438
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2025:14439 7.1

Red Hat Security Advisory: kernel-rt security update

Record: RHSA-2025:14439
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2025:15005 7.3

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:15005
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated: 2026-11-02

OSVRHSA-2025:15656 7.3

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:15656
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated: 2026-11-02

OSVRHSA-2025:15657 7.3

Red Hat Security Advisory: kernel-rt security update

Record: RHSA-2025:15657
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated: 2026-11-02

OSVRHSA-2025:15658 7.3

Red Hat Security Advisory: kernel-rt security update

Record: RHSA-2025:15658
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated: 2026-11-02

OSVRHSA-2025:15669 7.3

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:15669
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated: 2026-11-02

OSVRHSA-2025:15670 7.3

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:15670
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated: 2026-11-02

OSVRHSA-2025:16669 7.3

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:16669
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2025:17009 7.3

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:17009
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated: 2026-11-02

OSVRHSA-2025:17124 7.3

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:17124
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated: 2026-11-02

OSVRHSA-2025:22752 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:22752
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2025:14420 7.1

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: udp: Fix memory accounting leak. (CVE-2025-22058)
kernel: net_sched: ets: Fix double list add in class with netem as child qdisc (CVE-2025-37914)
kernel: ice: fix eswitch code memory leak in reset scenario (CVE-2025-38417)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2025:14420
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVRLSA-2025:15005 7.3

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: udp: Fix memory accounting leak. (CVE-2025-22058)
kernel: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CVE-2025-37823)
kernel: ext4: only dirty folios when data journaling regular files (CVE-2025-38220)
kernel: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CVE-2025-38211)
kernel: tipc: Fix use-after-free in tipc_conn_close() (CVE-2025-38464)
kernel: vsock: Fix transport_* TOCTOU (CVE-2025-38461)
kernel: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CVE-2025-38472)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2025:15005
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-11-CVE-2025-22058 5.5

CVE-2025-22058 in linux - Patched by Root

Root has patched CVE-2025-22058 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-11-CVE-2025-22058
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVROOT-OS-UBUNTU-2204-CVE-2025-22058 5.5

CVE-2025-22058 in linux - Patched by Root

Root has patched CVE-2025-22058 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2204-CVE-2025-22058
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVROOT-OS-UBUNTU-2404-CVE-2025-22058 5.5

CVE-2025-22058 in linux - Patched by Root

Root has patched CVE-2025-22058 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2404-CVE-2025-22058
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2025-22058 5.7

Record: UBUNTU-CVE-2025-22058
CVSS 4.0: 5.7 MediumCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVALSA-2025:14420 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: udp: Fix memory accounting leak. (CVE-2025-22058)
kernel: net_sched: ets: Fix double list add in class with netem as child qdisc (CVE-2025-37914)
kernel: ice: fix eswitch code memory leak in reset scenario (CVE-2025-38417)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2025:14420
Updated: 2026-11-02

OSVALSA-2025:14438 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: udp: Fix memory accounting leak. (CVE-2025-22058)
kernel: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (CVE-2025-38200)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2025:14438
Updated: 2026-11-02

OSVALSA-2025:14439 No score

Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: udp: Fix memory accounting leak. (CVE-2025-22058)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2025:14439
Updated: 2026-11-02

OSVALSA-2025:15005 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: udp: Fix memory accounting leak. (CVE-2025-22058)
kernel: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CVE-2025-37823)
kernel: ext4: only dirty folios when data journaling regular files (CVE-2025-38220)
kernel: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CVE-2025-38211)
kernel: tipc: Fix use-after-free in tipc_conn_close() (CVE-2025-38464)
kernel: vsock: Fix transport_* TOCTOU (CVE-2025-38461)
kernel: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CVE-2025-38472)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2025:15005
Updated: 2026-11-02

OSVAZL-69542 No score

CVE-2025-22058 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved:

udp: Fix memory accounting leak.

Matt Dowling reported a weird UDP memory usage issue.

We can reproduce the issue with the script below [0]:

/proc/net/sockstat reports 0 pages

# cat /proc/net/sockstat | grep UDP:
UDP: inuse 1 mem 0

Run the script till the report reaches 524,288

# python3 test.py & sleep 5
# cat /proc/net/sockstat | grep UDP:
UDP: inuse 3 mem 524288  <-- (INT_MAX + 1) >> PAGE_SHIFT

Kill the socket and confirm the number never drops

# pkill python3 && sleep 5
# cat /proc/net/sockstat | grep UDP:
UDP: inuse 1 mem 524288

(necessary since v6.0) Trigger proto_memory_pcpu_drain()

# python3 test.py & sleep 1 && pkill python3

The number doubles

# cat /proc/net/sockstat | grep UDP:
UDP: inuse 1 mem 1048577

The application set INT_MAX to SO_RCVBUF, which triggered an integer overflow in udp_rmem_release().

When a socket is close()d, udp_destruct_common() purges its receive queue and sums up skb->truesize in the queue. This total is calculated and stored in a local unsigned integer variable.

The total size is then passed to udp_rmem_release() to adjust memory accounting. However, because the function takes a signed integer argument, the total size can wrap around, causing an overflow.

Then, the released amount is calculated as follows:

Add size to sk->sk_forward_alloc.
Round down sk->sk_forward_alloc to the nearest lower multiple of PAGE_SIZE and assign it to amount.
Subtract amount from sk->sk_forward_alloc.
Pass amount >> PAGE_SHIFT to __sk_mem_reduce_allocated().

When the issue occurred, the total in udp_destruct_common() was 2147484480 (INT_MAX + 833), which was cast to -2147482816 in udp_rmem_release().

This issue makes further memory allocation fail once the socket's sk->sk_rmem_alloc exceeds net.ipv4.udp_rmem_min, resulting in packet drops.

To prevent this issue, let's use unsigned int for the calculation and call sk_forward_alloc_add() only once for the small delta.

Note that first_packet_length() also potentially has the same problem.

[0]: from socket import *

SO_RCVBUFFORCE = 33 INT_MAX = (2 ** 31) - 1

s = socket(AF_INET, SOCK_DGRAM) s.bind(('', 0)) s.setsockopt(SOL_SOCKET, SO_RCVBUFFORCE, INT_MAX)

c = socket(AF_INET, SOCK_DGRAM) c.connect(s.getsockname())

data = b'a' * 100

while True: c.send(data)

Record: AZL-69542
Updated: 2026-11-02

OSVCLSA-2025-1757699471 No score

kernel: Fix of 13 CVEs

mm/hugetlb: unshare page tables during VMA split, not before {CVE-2025-38084}
hugetlb: unshare some PMDs when splitting VMAs {CVE-2025-38084}
posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352}
tipc: Fix use-after-free in tipc_conn_close(). {CVE-2025-38464}
vsock: Fix transport_* TOCTOU {CVE-2025-38461}
RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction {CVE-2025-38211}
i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200}
net_sched: ets: Fix double list add in class with netem as child qdisc {CVE-2025-37914}
net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too {CVE-2025-37823}
udp: Fix memory accounting leak. {CVE-2025-22058}
net/sched: Always pass notifications when child class becomes empty {CVE-2025-38350}
codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() {CVE-2025-38177}
sch_htb: make htb_deactivate() idempotent {CVE-2025-38177}
sch_drr: make drr_qlen_notify() idempotent {CVE-2025-38177}
sch_htb: make htb_qlen_notify() idempotent {CVE-2025-38177}
sch_qfq: make qfq_qlen_notify() idempotent {CVE-2025-38177}
sch_ets: make est_qlen_notify() idempotent {CVE-2025-38177}
sch_hfsc: make hfsc_qlen_notify() idempotent {CVE-2025-38177}
sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() {CVE-2025-38000}
net: fix udp gso skb_segment after pull from frag_list {CVE-2025-38124}

Record: CLSA-2025-1757699471
Updated: 2026-11-02

OSVCLSA-2025-1757961506 No score

kernel: Fix of 28 CVEs

posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352}
xfrm: state: fix out-of-bounds read during lookup {CVE-2024-57982}
nfsd: fix race between laundromat and free_stateid {CVE-2024-50106}
nfsd: split sc_status out of sc_type {CVE-2024-50106}
nfsd: avoid race after unhash_delegation_locked() {CVE-2024-50106}
nfsd: don't call functions with side-effecting inside WARN_ON() {CVE-2024-50106}
can: peak_usb: fix use after free bugs {CVE-2021-47670}
wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds {CVE-2025-38159}
i2c/designware: Fix an initialization issue {CVE-2025-38380}
RDMA/rxe: Fix error unwind in rxe_create_qp() {CVE-2022-50127}
i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200}
udp: Fix memory accounting leak. {CVE-2025-22058}
Bluetooth: hci_core: Fix use-after-free in vhci_flush() {CVE-2025-38250}
net_sched: ets: Fix double list add in class with netem as child qdisc {CVE-2025-38085}
mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race {CVE-2025-38085}
mm/khugepaged: fix GUP-fast interaction by sending IPI {CVE-2025-38085}
padata: fix UAF in padata_reorder {CVE-2025-21727}
net/sched: Always pass notifications when child class becomes empty {CVE-2025-38350}
codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() {CVE-2025-38177}
sch_ets: make est_qlen_notify() idempotent {CVE-2025-38177}
sch_qfq: make qfq_qlen_notify() idempotent {CVE-2025-38177}
sch_hfsc: make hfsc_qlen_notify() idempotent {CVE-2025-38177}
sch_drr: make drr_qlen_notify() idempotent {CVE-2025-38177}
sch_htb: make htb_qlen_notify() idempotent {CVE-2025-38177}
sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() {CVE-2025-38000}
net/sched: sch_qfq: Fix race condition on qfq_aggregate {CVE-2025-38477}
tipc: Fix use-after-free in tipc_conn_close(). {CVE-2025-38464}
RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction {CVE-2025-38211}
scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332}
netfilter: xtables: avoid NFPROTO_UNSPEC where needed {CVE-2024-50038}
netfilter: xtables: Add snapshot of hardidletimer target {CVE-2024-50038}
crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079}
ext4: avoid resizing to a partial cluster size {CVE-2022-50020}
net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc {CVE-2025-37890}
net: tipc: fix refcount warning in tipc_aead_encrypt {CVE-2025-38273}
net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done {CVE-2025-38052}
memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove {CVE-2025-22020}

Record: CLSA-2025-1757961506
Updated: 2026-11-02

OSVCLSA-2025-1757961864 No score

kernel: Fix of 34 CVEs

inet: fully convert sk->sk_rx_dst to RCU rules {CVE-2021-47103}
ALSA: usb-audio: Fix out of bounds reads when finding clock sources {CVE-2024-53150}
posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352}
can: peak_usb: fix use after free bugs {CVE-2021-47670}
wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds {CVE-2025-38159}
RDMA/rxe: Fix error unwind in rxe_create_qp() {CVE-2022-50127}
i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200}
udp: Fix memory accounting leak. {CVE-2025-22058}
ALSA: bcd2000: Fix a UAF bug on the error path of probing {CVE-2022-50083}
ext4: correct the misjudgment in ext4_iget_extra_inode {CVE-2022-50083}
ext4: correct max_inline_xattr_value_size computing {CVE-2022-50083}
ext4: fix use-after-free in ext4_xattr_set_entry {CVE-2022-50083}
ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h {CVE-2022-50083}
Bluetooth: hci_core: Fix use-after-free in vhci_flush() {CVE-2025-38250}
net_sched: ets: Fix double list add in class with netem as child qdisc {CVE-2025-38085}
mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race {CVE-2025-38085}
padata: fix UAF in padata_reorder {CVE-2025-21727}
net/sched: Always pass notifications when child class becomes empty {CVE-2025-38350}
codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() {CVE-2025-38177}
sch_ets: make est_qlen_notify() idempotent {CVE-2025-38177}
sch_qfq: make qfq_qlen_notify() idempotent {CVE-2025-38177}
sch_hfsc: make hfsc_qlen_notify() idempotent {CVE-2025-38177}
sch_drr: make drr_qlen_notify() idempotent {CVE-2025-38177}
sch_htb: make htb_qlen_notify() idempotent {CVE-2025-38177}
sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() {CVE-2025-38000}
mptcp: do not queue data on closed subflows {CVE-2022-50070}
mptcp: export mptcp_subflow_active {CVE-2022-50070}
net/sched: sch_qfq: Fix race condition on qfq_aggregate {CVE-2025-38477}
tipc: Fix use-after-free in tipc_conn_close(). {CVE-2025-38464}
RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction {CVE-2025-38211}
scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332}
crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079}
net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc {CVE-2025-37890}
ext4: avoid resizing to a partial cluster size {CVE-2022-50020}
net: tipc: fix refcount warning in tipc_aead_encrypt {CVE-2025-38273}
ice: xsk: prohibit usage of non-balanced queue id {CVE-2022-50003}
net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done {CVE-2025-38052}
virtio-gpu: fix a missing check to avoid NULL dereference {CVE-2022-50181}
usb: xhci_plat_remove: avoid NULL dereference {CVE-2022-50133}
ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot {CVE-2022-50015}
netfilter: nft_tproxy: restrict to prerouting hook {CVE-2022-50001}
scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq {CVE-2022-49986}
ath11k: fix netdev open race {CVE-2022-50187}

Record: CLSA-2025-1757961864
Updated: 2026-11-02

OSVCLSA-2025-1757962453 No score

kernel: Fix of 34 CVEs

inet: fully convert sk->sk_rx_dst to RCU rules {CVE-2021-47103}
ALSA: usb-audio: Fix out of bounds reads when finding clock sources {CVE-2024-53150}
posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352}
can: peak_usb: fix use after free bugs {CVE-2021-47670}
wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds {CVE-2025-38159}
RDMA/rxe: Fix error unwind in rxe_create_qp() {CVE-2022-50127}
i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200}
udp: Fix memory accounting leak. {CVE-2025-22058}
ALSA: bcd2000: Fix a UAF bug on the error path of probing {CVE-2022-50083}
ext4: correct the misjudgment in ext4_iget_extra_inode {CVE-2022-50083}
ext4: correct max_inline_xattr_value_size computing {CVE-2022-50083}
ext4: fix use-after-free in ext4_xattr_set_entry {CVE-2022-50083}
ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h {CVE-2022-50083}
Bluetooth: hci_core: Fix use-after-free in vhci_flush() {CVE-2025-38250}
net_sched: ets: Fix double list add in class with netem as child qdisc {CVE-2025-38085}
mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race {CVE-2025-38085}
padata: fix UAF in padata_reorder {CVE-2025-21727}
net/sched: Always pass notifications when child class becomes empty {CVE-2025-38350}
codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() {CVE-2025-38177}
sch_ets: make est_qlen_notify() idempotent {CVE-2025-38177}
sch_qfq: make qfq_qlen_notify() idempotent {CVE-2025-38177}
sch_hfsc: make hfsc_qlen_notify() idempotent {CVE-2025-38177}
sch_drr: make drr_qlen_notify() idempotent {CVE-2025-38177}
sch_htb: make htb_qlen_notify() idempotent {CVE-2025-38177}
sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() {CVE-2025-38000}
mptcp: do not queue data on closed subflows {CVE-2022-50070}
mptcp: export mptcp_subflow_active {CVE-2022-50070}
net/sched: sch_qfq: Fix race condition on qfq_aggregate {CVE-2025-38477}
tipc: Fix use-after-free in tipc_conn_close(). {CVE-2025-38464}
RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction {CVE-2025-38211}
scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332}
crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079}
ext4: avoid resizing to a partial cluster size {CVE-2022-50020}
net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc {CVE-2025-37890}
net: tipc: fix refcount warning in tipc_aead_encrypt {CVE-2025-38273}
ice: xsk: prohibit usage of non-balanced queue id {CVE-2022-50003}
net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done {CVE-2025-38052}
virtio-gpu: fix a missing check to avoid NULL dereference {CVE-2022-50181}
usb: xhci_plat_remove: avoid NULL dereference {CVE-2022-50133}
ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot {CVE-2022-50015}
netfilter: nft_tproxy: restrict to prerouting hook {CVE-2022-50001}
scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq {CVE-2022-49986}
ath11k: fix netdev open race {CVE-2022-50187}

Record: CLSA-2025-1757962453
Updated: 2026-11-02

OSVCLSA-2025-1764085382 No score

kernel-uek: Fix of 236 CVEs

drm/amd/display: Skip on writeback when it's not applicable {CVE-2024-36914}
ASoC: topology: Fix references to freed memory {CVE-2024-41069}
Bluetooth: RFCOMM: Fix not validating setsockopt user input {CVE-2024-35966}
Bluetooth: SCO: Fix not validating setsockopt user input
drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616}
xfs: don't walk off the end of a directory data block {CVE-2024-41013}
wifi: cfg80211: check A-MSDU format more carefully {CVE-2024-35937}
Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
net/rds: Fix rs_recv_pending counting issue
LTS tag: v5.4.301
net: rtnetlink: fix module reference count leak issue in rtnetlink_rcv_msg
media: s5p-mfc: remove an unused/uninitialized variable
NFSD: Fix last write offset handling in layoutcommit
NFSD: Minor cleanup in layoutcommit processing
padata: Reset next CPU when reorder sequence wraps around
KEYS: trusted_tpm1: Compare HMAC values in constant time
NFSD: Define a proc_layoutcommit for the FlexFiles layout type {CVE-2025-40087}
vfs: Don't leak disconnected dentries on umount {CVE-2025-40105}
jbd2: ensure that all ongoing I/O complete before freeing blocks
ext4: detect invalid INLINE_DATA + EXTENTS flag combination {CVE-2025-40167}
drm/amdgpu: use atomic functions with memory barriers for vm fault info
ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() {CVE-2025-40198}
spi: cadence-quadspi: Flush posted register writes before DAC access
spi: cadence-quadspi: Flush posted register writes before INDAC access
memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe
memory: samsung: exynos-srom: Correct alignment
arm64: errata: Apply workarounds for Neoverse-V3AE
arm64: cputype: Add Neoverse-V3AE definitions
comedi: fix divide-by-zero in comedi_buf_munge() {CVE-2025-40106}
binder: remove "invalid inc weak" check
xhci: dbc: enable back DbC in resume if it was enabled before suspend
usb/core/quirks: Add Huawei ME906S to wakeup quirk
USB: serial: option: add Telit FN920C04 ECM compositions
USB: serial: option: add Quectel RG255C
USB: serial: option: add UNISOC UIS7720
net: ravb: Ensure memory write completes before ringing TX doorbell
net: usb: rtl8150: Fix frame padding
ocfs2: clear extent cache after moving/defragmenting extents
MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering
Revert "cpuidle: menu: Avoid discarding useful information"
net: bonding: fix possible peer notify event loss or dup issue
sctp: avoid NULL dereference when chunk data buffer is missing
arm64, mm: avoid always making PTE dirty in pte_mkwrite()
net: enetc: correct the value of ENETC_RXB_TRUESIZE
rtnetlink: Allow deleting FDB entries in user namespace
net: rtnetlink: add NLM_F_BULK support to rtnl_fdb_del
net: add ndo_fdb_del_bulk
net: rtnetlink: add bulk delete support flag
net: netlink: add NLM_F_BULK delete request modifier
net: rtnetlink: use BIT for flag values
net: rtnetlink: add helper to extract msg type's kind
net: rtnetlink: add msg kind names
net: rtnetlink: remove redundant assignment to variable err
m68k: bitops: Fix find_*_bit() signatures
hfsplus: return EIO when type of hidden directory mismatch in hfsplus_fill_super()
hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits()
dlm: check for defined force value in dlm_lockspace_release
hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat()
hfs: validate record offset in hfsplus_bmap_alloc
hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent()
hfs: make proper initalization of struct hfs_find_data
hfs: clear offset and space out of valid records in b-tree node
exec: Fix incorrect type for ret
hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() {CVE-2025-40088}
ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings
sched/fair: Fix pelt lost idle time…

Record: CLSA-2025-1764085382
Updated: 2026-11-02

OSV No score

udp: Fix memory accounting leak.

In the Linux kernel, the following vulnerability has been resolved:

udp: Fix memory accounting leak.

Matt Dowling reported a weird UDP memory usage issue.

We can reproduce the issue with the script below [0]:

/proc/net/sockstat reports 0 pages

# cat /proc/net/sockstat | grep UDP:
UDP: inuse 1 mem 0

Run the script till the report reaches 524,288

# python3 test.py & sleep 5
# cat /proc/net/sockstat | grep UDP:
UDP: inuse 3 mem 524288  <-- (INT_MAX + 1) >> PAGE_SHIFT

Kill the socket and confirm the number never drops

# pkill python3 && sleep 5
# cat /proc/net/sockstat | grep UDP:
UDP: inuse 1 mem 524288

(necessary since v6.0) Trigger proto_memory_pcpu_drain()

# python3 test.py & sleep 1 && pkill python3

The number doubles

# cat /proc/net/sockstat | grep UDP:
UDP: inuse 1 mem 1048577

The application set INT_MAX to SO_RCVBUF, which triggered an integer overflow in udp_rmem_release().

When a socket is close()d, udp_destruct_common() purges its receive queue and sums up skb->truesize in the queue. This total is calculated and stored in a local unsigned integer variable.

The total size is then passed to udp_rmem_release() to adjust memory accounting. However, because the function takes a signed integer argument, the total size can wrap around, causing an overflow.

Then, the released amount is calculated as follows:

Add size to sk->sk_forward_alloc.
Round down sk->sk_forward_alloc to the nearest lower multiple of PAGE_SIZE and assign it to amount.
Subtract amount from sk->sk_forward_alloc.
Pass amount >> PAGE_SHIFT to __sk_mem_reduce_allocated().

When the issue occurred, the total in udp_destruct_common() was 2147484480 (INT_MAX + 833), which was cast to -2147482816 in udp_rmem_release().

This issue makes further memory allocation fail once the socket's sk->sk_rmem_alloc exceeds net.ipv4.udp_rmem_min, resulting in packet drops.

To prevent this issue, let's use unsigned int for the calculation and call sk_forward_alloc_add() only once for the small delta.

Note that first_packet_length() also potentially has the same problem.

[0]: from socket import *

SO_RCVBUFFORCE = 33 INT_MAX = (2 ** 31) - 1

s = socket(AF_INET, SOCK_DGRAM) s.bind(('', 0)) s.setsockopt(SOL_SOCKET, SO_RCVBUFFORCE, INT_MAX)

c = socket(AF_INET, SOCK_DGRAM) c.connect(s.getsockname())

data = b'a' * 100

while True: c.send(data)

Record: CVE-2025-22058
Updated: 2026-11-02

OSVMGASA-2025-0142 No score

Updated kernel, kmod-virtualbox & kmod-xtables-addons packages fix security vulnerabilities

Upstream kernel version 6.6.87 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new kernel. For information about the vulnerabilities see the links.

Record: MGASA-2025-0142
Updated: 2026-11-02

OSVMGASA-2025-0146 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.88 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record: MGASA-2025-0146
Updated: 2026-11-02

OSVSUSE-SU-2025:01614-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
CVE-2024-50162: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075).
CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510).
CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
CVE-2025-21696: mm: clear uffd-wp PTE/PMD state on mremap() (bsc#1237111).
CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
CVE-2025-21729: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874).
CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1237882).
CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
CVE-2025-21806: net: let net.core.dev_weight always be non-zero (bsc#1238746).
CVE-2025-21808: net: xdp: Disallow attaching device-bound programs in generic mode (bsc#1238742).
CVE-2025-21812: ax25: rcu protect dev->ax25_ptr (bsc#1238471).
CVE-2025-21833: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (bsc#1239108).
CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066).
CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
CVE-2025-21863: io_uring: prevent opcode speculation (bsc#1239475).
CVE-2025-21867: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (bsc#1240181).
CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184).
CVE-2025-21875: mptcp: always handle address removal under msk socket lock (bsc#1240168).
CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
CVE-2025-21884: net: better track kernel sockets lifetime (bsc#1240171).
CVE-2025-21887: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176).
CVE-2025-21889: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167).
CVE-2025-21894: net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC (bsc#1240581).
CVE-2025-21895: perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list (bsc#1240585).
CVE-2025-21904: caif_virtio: fix wrong pointer check in cfv_probe() (bsc#1240576).
CVE-2025-21906: wifi: iwlwifi: mvm: clean up ROC on failure (bsc#1240587).
CVE-2025-21908: NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (bsc#1240600).
CVE-2025-21913: x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() (bsc#1240591).
CVE-2025-21922: ppp: Fix KMSAN uninit-value warning with bpf (bsc#1240639).
CVE-2025-21924: net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error (bsc#1240720). -…

Record: SUSE-SU-2025:01614-1
Updated: 2026-11-02

OSVSUSE-SU-2025:01707-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-27415: netfilter: bridge: confirm multicast packets before passing them up the stack (bsc#1224757).
CVE-2024-28956: Intel CPU: Indirect Target Selection (ITS) (bsc#1242006).
CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
CVE-2024-46763: fou: Fix null-ptr-deref in GRO (bsc#1230764).
CVE-2024-50038: netfilter: xtables: avoid NFPROTO_UNSPEC where needed (bsc#1231910).
CVE-2024-50162: bpf: devmap: provide rxq after redirect (bsc#1233075).
CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510).
CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
CVE-2025-21696: mm: clear uffd-wp PTE/PMD state on mremap() (bsc#1237111).
CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
CVE-2025-21729: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874).
CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1237882).
CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
CVE-2025-21806: net: let net.core.dev_weight always be non-zero (bsc#1238746).
CVE-2025-21808: net: xdp: Disallow attaching device-bound programs in generic mode (bsc#1238742).
CVE-2025-21812: ax25: rcu protect dev->ax25_ptr (bsc#1238471).
CVE-2025-21833: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (bsc#1239108).
CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066).
CVE-2025-21854: sockmap, vsock: For connectible sockets allow only connected (bsc#1239470).
CVE-2025-21863: io_uring: prevent opcode speculation (bsc#1239475).
CVE-2025-21867: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (bsc#1240181).
CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184).
CVE-2025-21875: mptcp: always handle address removal under msk socket lock (bsc#1240168).
CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
CVE-2025-21884: net: better track kernel sockets lifetime (bsc#1240171).
CVE-2025-21887: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176).
CVE-2025-21889: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167).
CVE-2025-21894: net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC (bsc#1240581).
CVE-2025-21895: perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list (bsc#1240585).
CVE-2025-21904: caif_virtio: fix wrong pointer check in cfv_probe() (bsc#1240576).
CVE-2025-21906: wifi: iwlwifi: mvm: clean up ROC on failure (bsc#1240587).
CVE-2025-21908: NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (bsc#1240600).
CVE-2025-21913: x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() (bsc#1240591).
CVE-2025-21922: ppp: Fix KMSAN uninit-value warning with bpf (bsc#1240639).…

Record: SUSE-SU-2025:01707-1
Updated: 2026-11-02

OSVSUSE-SU-2025:01919-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
CVE-2024-43869: perf: Fix hang while freeing sigtrap event (bsc#1229491).
CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
CVE-2024-50162: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075).
CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086). -…

Record: SUSE-SU-2025:01919-1
Updated: 2026-11-02

OSVSUSE-SU-2025:01951-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
CVE-2024-49570: drm/xe/tracing: Fix a potential TP_printk UAF (bsc#1238782).
CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
CVE-2024-58074: drm/i915: Grab intel_display from the encoder to avoid potential (bsc#1238972).
CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510). -…

Record: SUSE-SU-2025:01951-1
Updated: 2026-11-02

OSVSUSE-SU-2025:01964-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
CVE-2024-50162: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075).
CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510).
CVE-2025-21648: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (bsc#1236142).
CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
CVE-2025-21696: mm: clear uffd-wp PTE/PMD state on mremap() (bsc#1237111).
CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
CVE-2025-21729: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874).
CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1237882).
CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
CVE-2025-21787: team: better TEAM_OPTION_TYPE_STRING validation (bsc#1238774).
CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
CVE-2025-21806: net: let net.core.dev_weight always be non-zero (bsc#1238746).
CVE-2025-21808: net: xdp: Disallow attaching device-bound programs in generic mode (bsc#1238742).
CVE-2025-21812: ax25: rcu protect dev->ax25_ptr (bsc#1238471).
CVE-2025-21814: ptp: Ensure info->enable callback is always set (bsc#1238473).
CVE-2025-21833: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (bsc#1239108).
CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066).
CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
CVE-2025-21863: io_uring: prevent opcode speculation (bsc#1239475).
CVE-2025-21867: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (bsc#1240181).
CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184).
CVE-2025-21875: mptcp: always handle address removal under msk socket lock (bsc#1240168).
CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
CVE-2025-21884: net: better track kernel sockets lifetime (bsc#1240171).
CVE-2025-21887: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176).
CVE-2025-21889: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167).
CVE-2025-21894: net: enetc: VFs do not…

Record: SUSE-SU-2025:01964-1
Updated: 2026-11-02

OSVSUSE-SU-2025:01967-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
CVE-2024-49570: drm/xe/tracing: Fix a potential TP_printk UAF (bsc#1238782).
CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
CVE-2024-58074: drm/i915: Grab intel_display from the encoder to avoid potential (bsc#1238972).
CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510). -…

Record: SUSE-SU-2025:01967-1
Updated: 2026-11-02

OSVSUSE-SU-2025:01972-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
CVE-2025-21648: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (bsc#1236142).
CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
CVE-2025-21787: team: better TEAM_OPTION_TYPE_STRING validation (bsc#1238774).
CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
CVE-2025-21814: ptp: Ensure info->enable callback is always set (bsc#1238473).
CVE-2025-21919: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (bsc#1240593).
CVE-2025-21962: cifs: Fix integer overflow while processing closetimeo mount option (bsc#1240655).
CVE-2025-21963: cifs: Fix integer overflow while processing acdirmax mount option (bsc#1240717).
CVE-2025-21964: cifs: Fix integer overflow while processing acregmax mount option (bsc#1240740).
CVE-2025-22018: atm: Fix NULL pointer dereference (bsc#1241266).
CVE-2025-22021: netfilter: socket: Lookup orig tuple for IPv6 SNAT (bsc#1241282).
CVE-2025-22030: mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead() (bsc#1241376).
CVE-2025-22056: netfilter: nft_tunnel: fix geneve_opt type confusion addition (bsc#1241525).
CVE-2025-22057: net: decrease cached dst counters in dst_release (bsc#1241533).
CVE-2025-22058: udp: Fix memory accounting leak (bsc#1241332).
CVE-2025-22063: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (bsc#1241351).
CVE-2025-22064: netfilter: nf_tables: do not unregister hook when table is dormant (bsc#1241413).
CVE-2025-22070: fs/9p: fix NULL pointer dereference on mkdir (bsc#1241305).
CVE-2025-22094: powerpc/perf: Fix ref-counting on the PMU 'vpa_pmu' (bsc#1241512).
CVE-2025-22102: Bluetooth: btnxpuart: Fix kernel panic during FW release (bsc#1241456).
CVE-2025-22103: net: fix NULL pointer dereference in l3mdev_l3_rcv (bsc#1241448).
CVE-2025-22104: ibmvnic: Use kernel helpers for hex dumps (bsc#1241550).
CVE-2025-22107: net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() (bsc#1241575).
CVE-2025-22109: ax25: Remove broken autobind (bsc#1241573).
CVE-2025-23138: watch_queue: fix pipe accounting mismatch (bsc#1241648).
CVE-2025-23140: misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error (bsc#1242763).
CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242596).
CVE-2025-23150: ext4: fix off-by-one error in do_split (bsc#1242513).
CVE-2025-23154: io_uring/net: fix io_req_post_cqe abuse by send bundle (bsc#1242533).
CVE-2025-23160: media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization (bsc#1242507).
CVE-2025-37747: kABI workaround for perf-Fix-hang-while-freeing-sigtrap-event (References: bsc#1242520).
CVE-2025-37748: iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group (bsc#1242523).
CVE-2025-37749: net: ppp: Add bound checking for skb data on ppp_sync_txmung…

Record: SUSE-SU-2025:01972-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`kernel` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-64k` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-64k-core` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-64k-debug` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-64k-debug-core` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-64k-debug-devel` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-64k-debug-devel-matched` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-64k-debug-modules` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-64k-debug-modules-core` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-64k-debug-modules-extra` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-64k-devel` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-64k-devel-matched` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-64k-modules` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-64k-modules-core` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-64k-modules-extra` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-abi-stablelists` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-core` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-cross-headers` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-debug` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-debug-core` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-debug-devel` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-debug-devel-matched` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-debug-modules` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-debug-modules-core` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-debug-modules-extra` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-debug-uki-virt` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-devel` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-devel-matched` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-doc` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-headers` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-modules` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-modules-core` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-modules-extra` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-rt` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-rt-64k` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-rt-64k-core` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-rt-64k-debug` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-rt-64k-debug-core` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-rt-64k-debug-devel` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-rt-64k-debug-modules` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-rt-64k-debug-modules-core` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-rt-64k-debug-modules-extra` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-rt-64k-devel` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-rt-64k-modules` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-rt-64k-modules-core` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-rt-64k-modules-extra` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-rt-core` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-rt-debug` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-rt-debug-core` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-rt-debug-devel` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel-rt-debug-kvm` AlmaLinux:9	before 5.14.0-570.37.1.el9_6	5.14.0-570.37.1.el9_6
`kernel` Azure Linux:2	before 5.15.200.1-1	5.15.200.1-1
`linux-lts` Alpaquita:23	6.1.131-r0 up to 6.1.134-r0	6.1.134-r0
`linux-lts` Alpaquita:25	6.6.89-r0 up to 6.12.41-r0	6.12.41-r0
`linux-lts` Alpaquita:stream	6.12.92-r1 up to 6.18.35-r1	6.18.35-r1
`bpftool` TuxCare:AlmaLinux:9.2	before 7.0.0-284.1101.el9_2.tuxcare.7.els19	7.0.0-284.1101.el9_2.tuxcare.7.els19
`kernel` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.7.els19	5.14.0-284.1101.el9_2.tuxcare.7.els19
`kernel-abi-stablelists` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.7.els19	5.14.0-284.1101.el9_2.tuxcare.7.els19
`kernel-core` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.7.els19	5.14.0-284.1101.el9_2.tuxcare.7.els19
`kernel-cross-headers` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.7.els19	5.14.0-284.1101.el9_2.tuxcare.7.els19
`kernel-debug` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.7.els19	5.14.0-284.1101.el9_2.tuxcare.7.els19
`kernel-debug-core` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.7.els19	5.14.0-284.1101.el9_2.tuxcare.7.els19
`kernel-debug-devel` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.7.els19	5.14.0-284.1101.el9_2.tuxcare.7.els19
`kernel-debug-devel-matched` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.7.els19	5.14.0-284.1101.el9_2.tuxcare.7.els19
`kernel-debug-modules` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.7.els19	5.14.0-284.1101.el9_2.tuxcare.7.els19
`kernel-debug-modules-core` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.7.els19	5.14.0-284.1101.el9_2.tuxcare.7.els19
`kernel-debug-modules-extra` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.7.els19	5.14.0-284.1101.el9_2.tuxcare.7.els19
`kernel-debug-modules-internal` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.7.els19	5.14.0-284.1101.el9_2.tuxcare.7.els19
`kernel-debug-modules-partner` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.7.els19	5.14.0-284.1101.el9_2.tuxcare.7.els19
`kernel-debug-uki-virt` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.7.els19	5.14.0-284.1101.el9_2.tuxcare.7.els19
`kernel-devel` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.7.els19	5.14.0-284.1101.el9_2.tuxcare.7.els19
`kernel-devel-matched` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.7.els19	5.14.0-284.1101.el9_2.tuxcare.7.els19
`kernel-doc` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.7.els19	5.14.0-284.1101.el9_2.tuxcare.7.els19
`kernel-headers` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.7.els19	5.14.0-284.1101.el9_2.tuxcare.7.els19
`kernel-ipaclones-internal` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.7.els19	5.14.0-284.1101.el9_2.tuxcare.7.els19
`kernel-modules` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.7.els19	5.14.0-284.1101.el9_2.tuxcare.7.els19
`kernel-modules-core` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.7.els19	5.14.0-284.1101.el9_2.tuxcare.7.els19
`kernel-modules-extra` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.7.els19	5.14.0-284.1101.el9_2.tuxcare.7.els19
`kernel-modules-internal` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.7.els19	5.14.0-284.1101.el9_2.tuxcare.7.els19
`kernel-modules-partner` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.7.els19	5.14.0-284.1101.el9_2.tuxcare.7.els19
`kernel-selftests-internal` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.7.els19	5.14.0-284.1101.el9_2.tuxcare.7.els19
`kernel-tools` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.7.els19	5.14.0-284.1101.el9_2.tuxcare.7.els19
`kernel-tools-libs` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.7.els19	5.14.0-284.1101.el9_2.tuxcare.7.els19
`kernel-tools-libs-devel` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.7.els19	5.14.0-284.1101.el9_2.tuxcare.7.els19
`kernel-uki-virt` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.7.els19	5.14.0-284.1101.el9_2.tuxcare.7.els19
`libbpf` TuxCare:AlmaLinux:9.2	before 2:1.0.0-2.el9_2.tuxcare.7.els19	2:1.0.0-2.el9_2.tuxcare.7.els19
`libbpf-devel` TuxCare:AlmaLinux:9.2	before 2:1.0.0-2.el9_2.tuxcare.7.els19	2:1.0.0-2.el9_2.tuxcare.7.els19
`libbpf-static` TuxCare:AlmaLinux:9.2	before 2:1.0.0-2.el9_2.tuxcare.7.els19	2:1.0.0-2.el9_2.tuxcare.7.els19
`perf` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.7.els19	5.14.0-284.1101.el9_2.tuxcare.7.els19
`python3-perf` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.7.els19	5.14.0-284.1101.el9_2.tuxcare.7.els19
`rtla` TuxCare:AlmaLinux:9.2	before 5.14.0-284.1101.el9_2.tuxcare.7.els19	5.14.0-284.1101.el9_2.tuxcare.7.els19
`bpftool` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel-core` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel-cross-headers` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel-debug` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel-debug-core` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel-debug-devel` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel-debug-modules` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel-debug-modules-extra` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel-debug-modules-internal` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel-devel` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel-headers` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel-ipaclones-internal` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel-modules` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel-modules-extra` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`Kernel` Linux	4.10.0 up to 5.4.301, 5.5.0 up to 5.10.246, 5.11.0 up to 5.15.195, 5.16.0 up to 6.1.134, 6.2.0 up to 6.6.87, 6.7.0 up to 6.12.23, 6.13.0 up to 6.13.11, 6.14.0 up to 6.14.2	5.4.3015.10.2465.15.1956.1.1346.6.876.12.236.13.116.14.2
`linux` Debian:12	before 6.1.135-1, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 32 moreShow less 6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1	6.1.135-1
`linux` Debian:13	before 6.12.25-1	6.12.25-1
`linux` Debian:14	before 6.12.25-1	6.12.25-1
`linux-6.1` Debian:11	before 6.1.137-1~deb11u1, plus listed versions 6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u16.1.119-1~deb11u16.1.128-1~deb11u16.1.129-1~deb11u1	6.1.137-1~deb11u1
`linux` Debian:11	before 5.10.247-1, plus listed versions 5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1 Show 42 moreShow less 5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.216-15.10.218-15.10.221-15.10.223-15.10.226-15.10.234-15.10.237-15.10.244-15.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2	5.10.247-1
`kernel` Mageia:9	before 6.6.88-3.mga9	6.6.88-3.mga9
`kmod-virtualbox` Mageia:9	before 7.0.24-70.mga9	7.0.24-70.mga9
`kmod-xtables-addons` Mageia:9	before 3.24-78.mga9	3.24-78.mga9
`kernel-linus` Mageia:9	before 6.6.88-1.mga9	6.6.88-1.mga9
`kernel` openEuler:20.03-LTS-SP4	before 4.19.90-2505.1.0.0326.oe2003sp4	4.19.90-2505.1.0.0326.oe2003sp4
`kernel` openEuler:24.03-LTS	before 6.6.0-102.0.0.94.oe2403	6.6.0-102.0.0.94.oe2403
`kernel` openEuler:24.03-LTS-SP1	before 6.6.0-102.0.0.105.oe2403sp1	6.6.0-102.0.0.105.oe2403sp1
`kernel` openEuler:24.03-LTS-SP2	before 6.6.0-102.0.0.108.oe2403sp2	6.6.0-102.0.0.108.oe2403sp2
`kernel` openEuler:22.03-LTS-SP3	before 5.10.0-279.0.0.181.oe2203sp3	5.10.0-279.0.0.181.oe2203sp3
`kernel` openEuler:22.03-LTS-SP4	before 5.10.0-279.0.0.182.oe2203sp4	5.10.0-279.0.0.182.oe2203sp4
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-64k-debug-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-64k-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-64k-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-debug-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-debug-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-doc` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-rt-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-rt-64k-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-rt-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`libperf-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`perf` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`perf-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`python3-perf` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`python3-perf-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`rtla` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`rv` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-64k` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-64k-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-64k-debug` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-64k-debug-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-64k-debug-modules` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-64k-modules` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-64k-modules-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-64k-modules-extra` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-abi-stablelists` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-debug` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-debug-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel-debug-modules` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel` Rocky Linux:9	before 0:5.14.0-570.37.1.el9_6	0:5.14.0-570.37.1.el9_6
`kernel` Rocky Linux:10	before 0:6.12.0-55.30.1.el10_0	0:6.12.0-55.30.1.el10_0
`linux` Root:Debian:11	before 5.10.262-1.aikido.113	5.10.262-1.aikido.1135.10.262-1.aikido.114
`rootio-linux` Root:Debian:11	before 5.10.262-1.aikido.113	5.10.262-1.aikido.1135.10.262-1.aikido.114
`linux` Root:Ubuntu:22.04	before 5.15.0-202.212.aikido.118	5.15.0-202.212.aikido.118
`rootio-linux` Root:Ubuntu:22.04	before 5.15.0-202.212.aikido.118	5.15.0-202.212.aikido.118
`linux` Root:Ubuntu:24.04	before 6.8.0-147.147.aikido.90	6.8.0-147.147.aikido.90
`rootio-linux` Root:Ubuntu:24.04	before 6.8.0-147.147.aikido.90	6.8.0-147.147.aikido.90
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP6	before 6.4.0-150600.23.50.1	6.4.0-150600.23.50.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP6	before 6.4.0-150600.23.50.1	6.4.0-150600.23.50.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP6	before 6.4.0-150600.23.50.1.150600.12.22.1	6.4.0-150600.23.50.1.150600.12.22.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP6	before 6.4.0-150600.23.50.1	6.4.0-150600.23.50.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP6	before 6.4.0-150600.23.50.1	6.4.0-150600.23.50.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP6	before 6.4.0-150600.23.50.1	6.4.0-150600.23.50.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP6	before 6.4.0-150600.23.50.1	6.4.0-150600.23.50.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP6	before 6.4.0-150600.23.50.1	6.4.0-150600.23.50.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP6	before 6.4.0-150600.23.50.1	6.4.0-150600.23.50.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP6	before 6.4.0-150600.23.50.1	6.4.0-150600.23.50.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6	before 6.4.0-150600.23.50.1	6.4.0-150600.23.50.1
`kernel-livepatch-SLE15-SP6_Update_11` SUSE:Linux Enterprise Live Patching 15 SP6	before 1-150600.13.3.1	1-150600.13.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP6	before 6.4.0-150600.23.50.1	6.4.0-150600.23.50.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP6	before 6.4.0-150600.23.50.1	6.4.0-150600.23.50.1
`dtb-aarch64` openSUSE:Leap 15.6	before 6.4.0-150600.23.50.1	6.4.0-150600.23.50.1
`kernel-64kb` openSUSE:Leap 15.6	before 6.4.0-150600.23.50.1	6.4.0-150600.23.50.1
`kernel-debug` openSUSE:Leap 15.6	before 6.4.0-150600.23.50.1	6.4.0-150600.23.50.1
`kernel-default` openSUSE:Leap 15.6	before 6.4.0-150600.23.50.1	6.4.0-150600.23.50.1
`kernel-default-base` openSUSE:Leap 15.6	before 6.4.0-150600.23.50.1.150600.12.22.1	6.4.0-150600.23.50.1.150600.12.22.1
`kernel-docs` openSUSE:Leap 15.6	before 6.4.0-150600.23.50.1	6.4.0-150600.23.50.1
`kernel-kvmsmall` openSUSE:Leap 15.6	before 6.4.0-150600.23.50.1	6.4.0-150600.23.50.1
`kernel-obs-build` openSUSE:Leap 15.6	before 6.4.0-150600.23.50.1	6.4.0-150600.23.50.1
`kernel-obs-qa` openSUSE:Leap 15.6	before 6.4.0-150600.23.50.1	6.4.0-150600.23.50.1
`kernel-source` openSUSE:Leap 15.6	before 6.4.0-150600.23.50.1	6.4.0-150600.23.50.1
`kernel-syms` openSUSE:Leap 15.6	before 6.4.0-150600.23.50.1	6.4.0-150600.23.50.1
`kernel-zfcpdump` openSUSE:Leap 15.6	before 6.4.0-150600.23.50.1	6.4.0-150600.23.50.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6	before 6.4.0-150600.8.37.1	6.4.0-150600.8.37.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6	before 6.4.0-150600.8.37.1	6.4.0-150600.8.37.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6	before 6.4.0-150600.8.37.1	6.4.0-150600.8.37.1
`kernel-azure` openSUSE:Leap 15.6	before 6.4.0-150600.8.37.1	6.4.0-150600.8.37.1
`kernel-source-azure` openSUSE:Leap 15.6	before 6.4.0-150600.8.37.1	6.4.0-150600.8.37.1
`kernel-syms-azure` openSUSE:Leap 15.6	before 6.4.0-150600.8.37.1	6.4.0-150600.8.37.1
`kernel-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6	before 6.4.0-15061.21.coco15sp6.1	6.4.0-15061.21.coco15sp6.1
`kernel-coco_debug` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6	before 6.4.0-15061.21.coco15sp6.1	6.4.0-15061.21.coco15sp6.1
`kernel-source-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6	before 6.4.0-15061.21.coco15sp6.1	6.4.0-15061.21.coco15sp6.1
`kernel-syms-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6	before 6.4.0-15061.21.coco15sp6.1	6.4.0-15061.21.coco15sp6.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.3.1.150700.17.2.1	6.4.0-150700.53.3.1.150700.17.2.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-livepatch-SLE15-SP7_Update_1` SUSE:Linux Enterprise Live Patching 15 SP7	before 1-150700.15.3.1	1-150700.15.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-livepatch-SLE15-SP6-RT_Update_11` SUSE:Linux Enterprise Live Patching 15 SP6	before 1-150600.1.3.2	1-150600.1.3.2
`kernel-rt` SUSE:Real Time Module 15 SP6	before 6.4.0-150600.10.39.1	6.4.0-150600.10.39.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP6	before 6.4.0-150600.10.39.1	6.4.0-150600.10.39.1
`kernel-source-rt` SUSE:Real Time Module 15 SP6	before 6.4.0-150600.10.39.1	6.4.0-150600.10.39.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP6	before 6.4.0-150600.10.39.1	6.4.0-150600.10.39.1
`kernel-rt` openSUSE:Leap 15.6	before 6.4.0-150600.10.39.1	6.4.0-150600.10.39.1
`kernel-rt_debug` openSUSE:Leap 15.6	before 6.4.0-150600.10.39.1	6.4.0-150600.10.39.1
`kernel-source-rt` openSUSE:Leap 15.6	before 6.4.0-150600.10.39.1	6.4.0-150600.10.39.1
`kernel-syms-rt` openSUSE:Leap 15.6	before 6.4.0-150600.10.39.1	6.4.0-150600.10.39.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7	before 6.4.0-150700.20.3.1	6.4.0-150700.20.3.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7	before 6.4.0-150700.20.3.1	6.4.0-150700.20.3.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7	before 6.4.0-150700.20.3.1	6.4.0-150700.20.3.1
`kernel-livepatch-SLE15-SP7-RT_Update_1` SUSE:Linux Enterprise Live Patching 15 SP7	before 1-150700.1.3.1	1-150700.1.3.1
`kernel-rt` SUSE:Real Time Module 15 SP7	before 6.4.0-150700.7.3.1	6.4.0-150700.7.3.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP7	before 6.4.0-150700.7.3.1	6.4.0-150700.7.3.1
`kernel-source-rt` SUSE:Real Time Module 15 SP7	before 6.4.0-150700.7.3.1	6.4.0-150700.7.3.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP7	before 6.4.0-150700.7.3.1	6.4.0-150700.7.3.1
`kernel-default` SUSE:Linux Enterprise Live Patching 12 SP5	before 4.12.14-122.261.1	4.12.14-122.261.1
`kgraft-patch-SLE12-SP5_Update_69` SUSE:Linux Enterprise Live Patching 12 SP5	before 1-8.3.1	1-8.3.1
`linux-azure` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2 Show 45 moreShow less 4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1	None known
`linux-aws-hwe` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1 Show 45 moreShow less 4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1	None known
`linux-azure` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15 Show 45 moreShow less 4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71	None known
`linux-gcp` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9 Show 45 moreShow less 4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1	None known
`linux-hwe` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 45 moreShow less 4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1	None known
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-oracle` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1 Show 45 moreShow less 4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1	None known
`linux` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11 Show 45 moreShow less 4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107	None known
`linux-aws` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7 Show 45 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-aws-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-4.15` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102 Show 45 moreShow less 4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less 5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-4.15` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92 Show 45 moreShow less 4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gcp-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less 5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-ibm-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1 Show 45 moreShow less 5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1	None known
`linux-kvm` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8 Show 45 moreShow less 4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13 Show 45 moreShow less 4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-oracle-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1	None known
`linux-raspi-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 45 moreShow less 5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1	None known
`linux-aws-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24 Show 45 moreShow less 4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93	None known
`linux-azure-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10 Show 45 moreShow less 4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80	None known
`linux-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42 Show 45 moreShow less 4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110	None known
`linux-gcp-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21 Show 45 moreShow less 4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83	None known
`linux-aws-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-2000.4	None known
`linux-azure-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1002.2	None known
`linux-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1011.12	None known
`linux-gcp-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1001.1	None known
`linux` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25 Show 45 moreShow less 5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110	None known
`linux-aws` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5 Show 45 moreShow less 5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78	None known
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1100.107~20.04.2, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 45 moreShow less 5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1	5.15.0-1100.107~20.04.2
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8 Show 45 moreShow less 5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87	None known

History

History
When	Changed	Sources
2026-11-02	created	CVE List, EUVD, GitHub Advisories, NVD, OSV

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 1,098 package rows, 1,769 versions, 3,007 references and the rest of 14 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 36 source records.